branch master updated: hydra: bayfront: Restrict list of sudoers.

[Andreas Enge]

This is an automated email from the git hooks/post-receive script.

andreas pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
     new 77be193  hydra: bayfront: Restrict list of sudoers.
77be193 is described below

commit 77be193414b6e29d2b2efe6dc4019f665294eb05
Author: Andreas Enge <address@hidden>
AuthorDate: Mon May 4 21:40:52 2020 +0200

    hydra: bayfront: Restrict list of sudoers.
    
    * hydra/bayfront.scm (%sysadmins): Add "restricted? #t" to all users that
      have not updated the machine in the past or are Guix maintainers.
      Order users alphabetically by first name.
---
 hydra/bayfront.scm | 37 +++++++++++++++++++++----------------
 1 file changed, 21 insertions(+), 16 deletions(-)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index ced6a31..b586aec 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -9,30 +9,35 @@
 
 (define %sysadmins
   ;; The sysadmins.
-  (list (sysadmin (name "ludo")
-                  (full-name "Ludovic Courtès")
-                  (ssh-public-key (local-file "keys/ssh/ludo.pub")))
-        (sysadmin (name "andreas")
+  (list (sysadmin (name "andreas")
                   (full-name "Andreas Enge")
                   (ssh-public-key (local-file "keys/ssh/andreas.pub")))
+        (sysadmin (name "marusich")
+                  (full-name "Chris Marusich")
+                  (ssh-public-key (local-file "keys/ssh/marusich.pub"))
+                  (restricted? #t))
+        (sysadmin (name "cbaines")
+                  (full-name "Christopher Baines")
+                  (ssh-public-key (local-file "keys/ssh/cbaines.pub")))
         (sysadmin (name "dannym")
                   (full-name "Danny Milosavljevic")
-                  (ssh-public-key (local-file "keys/ssh/dannym.pub")))
+                  (ssh-public-key (local-file "keys/ssh/dannym.pub"))
+                  (restricted? #t))
         (sysadmin (name "efraim")
                   (full-name "Efraim Flashner")
-                  (ssh-public-key (local-file "keys/ssh/efraim.pub")))
-        (sysadmin (name "rekado")
-                  (full-name "Ricardo Wurmus")
-                  (ssh-public-key (local-file "keys/ssh/rekado.pub")))
+                  (ssh-public-key (local-file "keys/ssh/efraim.pub"))
+                  (restricted? #t))
         (sysadmin (name "roptat")
                   (full-name "Julien Lepiller")
-                  (ssh-public-key (local-file "keys/ssh/roptat.pub")))
-        (sysadmin (name "marusich")
-                  (full-name "Chris Marusich")
-                  (ssh-public-key (local-file "keys/ssh/marusich.pub")))
-        (sysadmin (name "cbaines")
-                  (full-name "Christopher Baines")
-                  (ssh-public-key (local-file "keys/ssh/cbaines.pub")))))
+                  (ssh-public-key (local-file "keys/ssh/roptat.pub"))
+                  (restricted? #t))
+        (sysadmin (name "ludo")
+                  (full-name "Ludovic Courtès")
+                  (ssh-public-key (local-file "keys/ssh/ludo.pub")))
+        (sysadmin (name "rekado")
+                  (full-name "Ricardo Wurmus")
+                  (ssh-public-key (local-file "keys/ssh/rekado.pub"))
+                  (restricted? #t))))
 
 (define %nginx-config
   ;; Our nginx configuration directory.  It expects 'guix publish' to be